GoTo Group - Security Operations Senior Manager - CISO

GoTo Group; Jakarta Pusat; On-site; IDR 900,000,000 - 1,300,000,000; Full time

Job summary

GoTo Group in Indonesia seeks a Security Operations Senior Manager (CISO) to own and drive incident response, threat detection, and digital forensics across cloud, on-premise, and SaaS environments. You will lead a high-performing team of responders, define incident playbooks, and ensure rapid, evidence-based remediation.

You will partner with executives and security engineering to translate technical risk into business impact, oversee budgeting for security programs, and foster continuous

Qualifications

• Led major incidents and investigations with cross-functional stakeholders.
• Experience with cloud and SaaS investigations (AWS, GCP, O365).
• Experience in security engineering collaboration (DevSecOps, Cloud Security).
• Certified security credentials a plus (CISSP, CISM, GIAC).

Responsibilities

• Be the incident response leader for the team, guiding, coaching and enabling high performance.
• Oversee end-to-end cyber incidents and post-mortem lessons to drive remediation.
• Coordinate with business and technical stakeholders during incidents and report updates.

Skills

Incident response leadership

Cloud security

Threat detection

Digital forensics

Stakeholder management

Tools

AWS

GCP

SOAR

SIEM

Job description

Security Operations Senior Manager - CISO

About The Role

As part of our Information Security function, we need a leader who can fully own, manage, respond to, and investigate cybersecurity incidents. As the Security Operations Senior Manager, this person will lead a team of highly technical responders and will need to have a vision to ensure continuous improvement and maintain a high-performing team. The scope includes incident management, threat detection, and digital forensic investigation in combination with root-cause analysis of security flaws and vulnerabilities. The role is also expected to develop elegant solutions to complex problems and apply appropriate technologies while following security engineering best practices.

What You Will Do

• Be the leader for the incident response team - manage, empower, nurture, support, and guide the team, and bring out the best in them
• Effectively manage and lead cyber incidents (end-to-end) according to the incident response process and playbooks. Also, support operational security remediation activities based on lessons learned from post-mortem investigations of incidents.
• Manage the various stakeholders (business and technical) during an incident with timely reporting and updates; manage the cybersecurity incident response and investigation on network, endpoint, and cloud infrastructure
• Manage the work deliverables of their team and can set goals and priorities throughout the year
• Provides strategic inputs into budget management and planning and other business activities, and also supports the Security Engineering team
• Provides coaching, feedback, developmental opportunities, etc. to direct/indirect reports within a broader team
• Build relationships with stakeholders and leadership across the organization to influence change and drive consistency with Information Security standards. Also enable collaboration, provide oversight, and guidance for periodic security assessments and improvements
• Research and analyze local and global cyber threats that could impact the company

What You Will Need

• Successfully lead major incidents and investigations that involve various stakeholders
• Seasoned leader who can manage a team of responders and investigators
• Experience in managing senior stakeholders (including C-suites and Board of Directors) and a seasoned leader who can manage a team of responders and investigators
• Experienced in conducting investigations within cloud and SaaS platforms (eg AWS, GCP, Tencent Cloud, Alibaba Cloud, O365, G Suite, containers, etc), SIEMs, SOAR and other automation, etc.
• Experienced in working with the Security Engineering team: DevSecOps, Offensive Security, Cloud Security, Security Architecture
• Ability to derive and translate technical jargon to business impact, and experience in driving change (organizational, cultural, and process) needed to respond to current and emerging threats
• Experience in relevant industries (e.g., eCommerce, Logistics, FinTech, Banking) is a plus
• Certified in one or more of the following security certifications is a plus: CISSP, CISA, CISM, SANS GIAC, or other relevant security certifications

About The Team

At GoTo, trust isn't just something we talk about -it's built into every line of code, every transaction, and every interaction across our ecosystem.

Our CISO function is the backbone of that trust. We are a team of world-class security engineers, risk strategists, and ethical hackers dedicated to creating a safe, resilient, and dependable digital ecosystem for millions of users, driver-partners, and merchants across Indonesia and beyond.

We don't view security as a wall that slows innovation down. Instead, we act as the high-performance brakes on a race car-allowing GoTo's product, engineering, and business teams to move faster, dream bigger, and build bolder, knowing our platforms are protected by cutting-edge defenses. Whether we are engineering automated threat responses, performing deep red-teaming simulations, or embedding security into modern CI/CD pipelines, our mission remains clear: to make GoTo the safest, most trusted digital platform in Southeast Asia.

About GoTo Group

GoTo is the largest digital ecosystem in Indonesia. GoTo's mission is 'empower progress' by offering technology infrastructure and solutions that help everyone to access and thrive in the digital economy.

The GoTo ecosystem provides a wide range of services, including mobility, delivery, payments, financial services, and technology solutions for merchants. The ecosystem also provides e-commerce services through Tokopedia and banking services through its partnership with Bank Jago.

About Gojek

Gojek is Southeast Asia's leading on-demand platform and pioneer of the multi-service ecosystem with over 2.5 million driver partners across the regions offering a wide range of services such as transportation, food delivery, logistics and more. With its mission to create impact at scale, Gojek is committed to resolving consumer problems and raising standards of living by connecting consumers to the best providers of goods and services in the market.

About GoTo Financial

GoTo Financial accelerates financial inclusion through its leading financial services and merchants solutions. Its consumer services include GoPay and GoPayLater and serve businesses of all sizes through Midtrans, Moka, GoBiz Plus, GoBiz, and Selly. With its trusted and inclusive ecosystem of products, GoTo Financial is open to new growth opportunities and aims to empower everyone to Make It Happen, Make It Together, Make It Last.